Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/33713D94458111EE89691C79C4F9AE02.roa
File:                     33713D94458111EE89691C79C4F9AE02.roa (raw, json)
Hash identifier:          Zitu4h3r0K1NDd+OUMKXF+VQCOs8rnYbQUtY9I5LXDA=
Subject key identifier:   27:0E:6A:5F:7E:B4:83:A5:C2:84:0B:C8:85:CC:45:DA:B9:9A:C1:23
Certificate issuer:       /CN=A915D85E/serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70
Certificate serial:       05DB
Authority key identifier: D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/33713D94458111EE89691C79C4F9AE02.roa
Signing time:             Mon 28 Aug 2023 08:59:31 +0000
ROA not before:           Mon 28 Aug 2023 08:59:31 +0000
ROA not after:            Fri 01 Mar 2024 00:00:00 +0000
asID:                     141731
IP address blocks:        103.159.171.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1499 (0x5db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D85E/serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70
        Validity
            Not Before: Aug 28 08:59:31 2023 GMT
            Not After : Mar  1 00:00:00 2024 GMT
        Subject: CN=64ec61f3-5f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:05:da:f6:ba:96:5e:27:3c:bb:58:50:b9:d6:
                    3a:0c:32:21:53:8d:22:fb:4b:bf:c0:97:26:8a:c7:
                    e3:da:c3:4a:41:d7:76:60:93:45:7f:05:c7:25:ab:
                    5e:ea:ac:83:6e:d9:f1:09:59:35:14:9b:6b:08:8b:
                    53:e5:1e:bd:5c:ab:97:64:f4:3e:5a:b3:23:ff:1a:
                    23:06:1f:ea:33:ac:e1:9c:0c:0f:24:a5:ab:49:80:
                    ff:58:89:3e:fa:70:b7:c9:38:5f:5e:c4:5d:46:af:
                    f6:cc:15:e3:a2:3b:d5:7a:61:5b:b5:1d:ca:b7:8a:
                    6f:84:db:cc:3d:2a:9b:f1:f7:ce:05:96:fe:4f:93:
                    b9:f4:36:dd:39:96:b9:23:9d:73:09:f5:40:b2:54:
                    ec:92:b4:58:a4:bc:48:fd:89:c0:e5:69:44:a0:fc:
                    ff:3d:31:a8:95:4e:ad:c0:58:4d:d4:03:0c:ce:46:
                    a8:37:ce:25:4b:c6:39:fd:4d:db:cb:28:36:2f:2b:
                    bb:05:a5:f6:32:cc:54:21:55:cf:5d:ce:19:f0:a9:
                    2d:a3:fc:79:8b:4f:59:a3:0a:2e:9d:9f:63:d7:18:
                    bc:fa:8b:97:e8:a2:f9:c4:52:50:63:59:d2:67:53:
                    fe:d9:ce:6b:1e:f2:12:4e:39:6b:91:a7:99:83:7c:
                    86:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0E:6A:5F:7E:B4:83:A5:C2:84:0B:C8:85:CC:45:DA:B9:9A:C1:23
            X509v3 Authority Key Identifier:
                keyid:D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/33713D94458111EE89691C79C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:81:62:ca:9b:e2:64:2e:0e:1e:18:78:65:06:99:6d:10:cb:
         76:88:df:52:77:ee:e1:67:49:11:6d:42:94:3e:b7:83:b0:4d:
         53:65:2d:f5:4b:e4:cc:9f:fa:3f:e5:46:43:bd:1d:a1:3e:e7:
         5c:b3:25:2d:f8:52:e0:26:9a:b4:01:ff:01:73:43:cd:9f:d0:
         0b:91:72:1b:76:0d:85:0f:3c:ad:63:10:0f:bf:ef:f4:7c:77:
         a6:03:70:17:da:b9:73:38:73:78:4a:8d:44:35:3e:4b:47:1a:
         ec:fd:e8:f3:ff:38:32:b1:6c:b4:ee:e5:43:08:49:68:bd:ce:
         22:1e:50:56:44:5e:63:a6:45:cb:56:2e:a2:cf:56:3f:f8:a3:
         60:ce:1d:21:4b:84:1a:57:59:5b:ea:0c:d5:1a:48:0c:ab:6f:
         14:65:b1:51:ae:b2:c5:21:a6:35:62:4b:15:9b:54:e7:b4:04:
         b8:bf:c3:a3:ee:71:a1:12:b3:df:8c:c6:b4:d0:00:5b:fb:b6:
         e4:4d:94:67:f9:57:84:56:bd:58:e5:de:f2:3e:1a:ea:de:54:
         39:c5:29:23:a5:f6:b1:f0:9d:61:98:a7:43:1e:49:7a:1d:75:
         50:f6:c2:29:a2:d7:61:0a:fe:f0:b1:bd:59:1d:ba:b3:15:52:
         4d:11:df:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-ams.rpki-client.org